High severity7.2NVD Advisory· Published Jan 3, 2022· Updated Jun 17, 2026

CVE-2021-24786

Description

The Download Monitor WordPress plugin before 4.4.5 does not properly validate and escape the "orderby" GET parameter before using it in a SQL statement when viewing the logs, leading to an SQL Injection issue

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Download Monitordescription
WordPress/Download Monitorllm-fuzzy
Range: <4.4.5
Package: https://wordpress.org/plugins/download-monitor

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/a6571f16-66d2-449e-af83-1c6ddd56edfanvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.014
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000